Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File: ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier: 7oHPaIi3zkL7ljwCdEQ2tZwouEcEnYze06/cC72JhM0=
Subject key identifier: 2A:3E:60:73:13:A8:07:C7:EB:98:AC:4E:99:E6:4E:75:2B:AC:46:EF
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 019A711377E2500B41209A5FC3A28F0BF016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 04:01:32 +0000
Manifest this update: Tue 11 Nov 2025 04:01:32 +0000
Manifest next update: Wed 12 Nov 2025 04:01:32 +0000
Files and hashes: 1: 02kstygB_1Q-T4WpJF1fDwmJj7Y.roa (hash: 1yQLO6zXVi4jG2bubLFyNc7MiwNkUFoEG9KeznEMEp4=)
2: 4-SKabrWOl-7KlndWPRuCU9aEhs.roa (hash: lMaT7o02aVJAelpgq3JP3XJEHgIKnGWGn47SBUcvn5g=)
3: 74cXj7lP_FQ57KeYqN8W9vMA6WQ.roa (hash: pDQOcgNah/jCnsBGAc6iogJ+wu4Uu+Dh8zXH7N+2KMU=)
4: 7Sa61R-MOh-0ZN995AyZU8ZyFSg.roa (hash: vYukMa63xBh0wU8yyQa7I0WK1kHPXukHl42Dhw+i7vg=)
5: BFpvKhELM78QLCFM7cjT2Dri-Ks.roa (hash: c09KIIz60Nm+dgzrURYFnp6FyV+tcK5Ue3poQFctk+0=)
6: EOa7r-jJgtdz4RGUmunD8B8QB9E.roa (hash: 4iOebAizMatknAk9CDhaCyLQWxnN0bfea5KmgMRwulk=)
7: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: kIDqV/S85tccoQpV2uaisxrqhXRRnDg1+2rR8PPospU=)
8: iJ0N88iATNc7UiUGXoHztFV1r-M.roa (hash: l8fJQFt0ipvnCwRF0O4nNX66/X32E1fs26DRKw04Vb0=)
9: ukKrQsbJYmMnCmIVGPhPmqzzI-Y.roa (hash: YP54ZYRp6pI7NTnVUT51wnLKoj40S7g2X/Zv7SQymBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:77:e2:50:0b:41:20:9a:5f:c3:a2:8f:0b:f0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Nov 11 04:01:32 2025 GMT
Not After : Nov 12 04:01:32 2025 GMT
Subject: CN=2a3e607313a807c7eb98ac4e99e64e752bac46ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2a:36:b3:55:ba:7e:12:92:e8:2d:d3:74:82:
98:f3:72:e5:ed:2a:11:b3:03:09:3d:4a:0d:52:54:
65:30:7a:75:9f:78:51:a1:d7:d3:93:1a:2f:fb:ca:
09:fc:c4:65:59:fb:d3:e2:ce:c5:49:57:e0:7f:db:
da:04:b3:18:ca:ef:c9:fc:3c:49:89:53:25:e2:7b:
07:41:8d:68:b8:08:a6:2d:7e:ca:35:9e:1b:9e:f9:
51:a1:73:2b:b8:58:99:ef:26:dc:74:5e:7e:33:37:
c7:5e:63:4f:a0:71:ca:f3:13:07:80:91:05:f2:25:
cd:91:3d:0a:87:c5:94:2a:6d:b4:bc:48:9e:ea:9f:
af:46:0b:ed:68:5d:38:bb:44:c0:02:48:31:3c:28:
29:95:5e:7c:ea:bf:cc:d5:39:b7:d2:49:3a:76:c6:
9f:92:cf:69:fb:a1:ad:3b:b9:75:4e:fa:28:c5:52:
4c:a5:a1:b1:b6:0c:5e:42:86:92:1c:71:7d:b2:e1:
66:0c:cf:97:33:fc:5d:78:1d:97:fd:0b:b1:28:81:
c4:f5:f6:bd:ba:9a:51:6c:97:3c:0c:c5:39:c7:c5:
93:a4:bc:8f:63:40:9e:7a:1e:8f:e7:cf:7d:59:25:
bf:a9:4e:11:f7:7d:10:38:ee:a2:9a:e3:74:66:fd:
46:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3E:60:73:13:A8:07:C7:EB:98:AC:4E:99:E6:4E:75:2B:AC:46:EF
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d5:06:24:77:e1:18:d9:8a:22:03:76:eb:a5:a0:06:06:fe:
23:55:ac:b6:4a:d9:be:be:a7:15:1d:c0:e8:6a:85:1c:ad:0c:
61:5c:5a:82:70:6f:f0:39:b6:52:c4:7b:c4:05:18:0a:0e:82:
d8:60:9b:88:ac:5d:67:e1:89:d6:a0:84:2a:e8:82:57:fd:ae:
99:f9:11:19:88:97:8b:24:03:8f:13:7b:06:2f:05:00:ae:df:
de:a1:28:45:2d:9d:cf:d5:5c:42:5a:99:28:bb:b7:5b:84:c1:
fd:4f:61:41:ff:7a:84:97:82:68:8b:13:56:dc:c0:30:e9:28:
10:09:a2:0a:a4:62:1e:2e:71:96:4c:44:c7:1a:c2:3d:fe:16:
c3:f2:19:21:00:62:6d:1c:b9:31:1a:f4:e2:58:bf:80:ab:84:
e9:13:b0:64:0e:62:fd:d9:01:4f:d2:02:ba:62:93:37:4f:c6:
71:9e:ac:7f:c4:52:40:bc:60:da:0a:00:f8:05:c1:91:1b:02:
c8:6c:76:f6:60:68:a1:54:68:cc:94:bf:ab:c4:7e:4c:45:2e:
4d:40:d9:90:c0:a3:01:dd:72:44:ae:99:ff:1d:86:f5:e5:b7:
0d:32:fd:2d:5e:c9:61:ba:c8:a7:17:d0:2f:3a:11:f2:aa:ac:
4f:50:c0:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE3fiUAtBIJpfw6KPC/AWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZTkyYzM0MWU3Njk0NDNmZGUxZDI3NTY2MDQ0YjRiNjUx
NTkwNjAwHhcNMjUxMTExMDQwMTMyWhcNMjUxMTEyMDQwMTMyWjAzMTEwLwYDVQQD
EygyYTNlNjA3MzEzYTgwN2M3ZWI5OGFjNGU5OWU2NGU3NTJiYWM0NmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3io2s1W6fhKS6C3TdIKY83Ll7SoR
swMJPUoNUlRlMHp1n3hRodfTkxov+8oJ/MRlWfvT4s7FSVfgf9vaBLMYyu/J/DxJ
iVMl4nsHQY1ouAimLX7KNZ4bnvlRoXMruFiZ7ybcdF5+MzfHXmNPoHHK8xMHgJEF
8iXNkT0Kh8WUKm20vEie6p+vRgvtaF04u0TAAkgxPCgplV586r/M1Tm30kk6dsaf
ks9p+6GtO7l1TvooxVJMpaGxtgxeQoaSHHF9suFmDM+XM/xdeB2X/QuxKIHE9fa9
uppRbJc8DMU5x8WTpLyPY0Ceeh6P5899WSW/qU4R930QOO6imuN0Zv1G/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCo+YHMTqAfH65isTpnmTnUrrEbvMB8GA1UdIwQY
MBaAFGbpLDQedpRD/eHSdWYES0tlFZBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYt
YzFkMjk2ZjhmZDA3LzEvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYtYzFkMjk2ZjhmZDA3
LzEvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdUGJHfh
GNmKIgN266WgBgb+I1WstkrZvr6nFR3A6GqFHK0MYVxagnBv8Dm2UsR7xAUYCg6C
2GCbiKxdZ+GJ1qCEKuiCV/2umfkRGYiXiyQDjxN7Bi8FAK7f3qEoRS2dz9VcQlqZ
KLu3W4TB/U9hQf96hJeCaIsTVtzAMOkoEAmiCqRiHi5xlkxExxrCPf4Ww/IZIQBi
bRy5MRr04li/gKuE6ROwZA5i/dkBT9ICumKTN0/GcZ6sf8RSQLxg2goA+AXBkRsC
yGx29mBooVRozJS/q8R+TEUuTUDZkMCjAd1yRK6Z/x2G9eW3DTL9LV7JYbrIpxfQ
LzoR8qqsT1DAFg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:55 2025 by rpki-client